Threat Intelligence Analyst

Location: Leca do Balio, Portugal
Key Responsibilities
Support Digital Risk Protection (DRPS) activities, including monitoring leaks, external attack surfaces, fraud threats and digital risks.
Monitor, identify, and analyze emerging cyber threats, threat actors, campaigns, and attack techniques.
Produce tactical, operational, and strategic threat intelligence reports.
Conduct research on cybercriminal groups, ransomware operations, vulnerabilities, exploits, and threat trends.
Contribute to threat intelligence briefings, customer reports, executive and operational-level reports.
Analyze indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs), and map findings to frameworks such as MITRE ATT&CK.
Enrich threat intelligence platforms and knowledge bases.
Collaborate with SOC, Incident Response, and other internal and external cybersecurity teams.
Participate in the continuous improvement of intelligence processes, methodologies, and automation initiatives.
Required Qualifications
Higher education degree or technical-professional qualification in Cybersecurity, Computer Engineering, Networks, or a related field.
Minimum of 3 years of experience in related roles.
Experience with Digital Risk Protection, brand monitoring and Fraud monitoring.
Experience with OSINT and SOCMINT techniques, dark web monitoring and intelligence gathering.
Knowledge on Cyber Threat Intelligence and Threat Exposure Management platforms such as Recorded Future, Sixgill, Flare, or similar.
Experience with Threat Intelligence Platforms (TIPs) such as OpenCTI, MISP, ThreatQ, or similar.
Understanding of cyber threat actors, malware, ransomware, phishing, and common attack vectors.
Familiarity with threat intelligence frameworks and methodologies.
Relevant certifications or training (e.g. CTIA, GCTI, CPTIA) will be considered an asset.
Strong analytical, research, and report-writing skills and ability to communicate technical findings to both technical and non-technical audiences.
Team-oriented mindset, organizational skills, sense of responsibility, and ability to work effectively in dynamic and collaborative environments.
Basic knowledge of malware analysis and network traffic analysis and familiarity with SIEM solutions and other security monitoring tools.
Basic scripting and programing skills will be appreciated (Python, PowerShell, Bash).
Good written communication skills and ability to understand technical English;
Native Portuguese speaker and professional proficiency in English (C1).
Location: Lisbon or Porto (hybrid working model)